Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2046b7578bbaa098b083e843bd46c17390e6597.cer
File:                     f2046b7578bbaa098b083e843bd46c17390e6597.cer (raw, json)
Hash identifier:          SJ7L/7rKFUqy3y0q8fSXi8hJXzKOLOrdeVdbw6mZ3/8=
Subject key identifier:   CA:6B:2F:26:EA:5F:47:C2:B4:72:4C:D1:35:71:79:AC:C9:8F:23:EA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D82443
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6a54d8a4-ff02-430a-ad5d-79095b0d2a67/f2046b7578bbaa098b083e843bd46c17390e6597.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6a54d8a4-ff02-430a-ad5d-79095b0d2a67/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Feb 2020 20:18:14 +0000
Certificate not after:    Tue 26 Dec 2023 05:00:00 +0000
Subordinate resources:    AS: 52444
                          IP: 170.80.168.0/22
                          IP: 190.105.208.0/20
                          IP: 190.123.80.0/20
                          IP: 2803:6d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14165059 (0xd82443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 24 20:18:14 2020 GMT
            Not After : Dec 26 05:00:00 2023 GMT
        Subject: CN=f2046b7578bbaa098b083e843bd46c17390e6597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:23:e3:2e:6b:7f:62:95:47:4a:5d:3c:39:
                    cd:a6:6c:33:e9:68:0c:04:ae:ba:75:2b:f1:f0:98:
                    e2:fd:c6:2b:35:c1:fa:c4:e6:98:e1:40:24:cc:11:
                    96:c7:f1:34:bd:cc:a7:29:58:ba:2a:e0:b5:c5:e4:
                    dc:73:de:96:88:9e:6d:99:fc:05:51:72:23:f5:82:
                    6e:ed:18:20:cf:de:00:b2:f1:c9:51:70:6d:39:e2:
                    df:c0:c7:d4:8a:88:63:30:05:54:9d:52:48:ac:b5:
                    4e:e2:55:2f:17:2c:21:35:df:46:78:9f:f9:c4:98:
                    40:d8:b0:76:3e:cd:e3:aa:08:55:fe:e2:e3:b8:e1:
                    5c:39:48:3e:6e:d8:f8:f8:ab:76:4a:02:8b:fa:1e:
                    9b:d7:9c:e8:64:4a:81:64:52:5d:3c:11:95:0a:db:
                    85:5f:05:ed:38:96:05:e9:5b:f9:db:52:a3:4c:7c:
                    30:a4:19:bb:c3:b7:46:11:9f:f2:fd:91:1d:5f:91:
                    73:7f:d2:ec:4c:d2:46:47:c8:5c:b1:be:40:f6:35:
                    09:32:be:33:13:fb:a6:7e:55:f1:ae:91:2a:9c:65:
                    a8:75:8b:e7:e2:3c:f5:87:fd:99:a9:3b:4d:c4:54:
                    ff:2c:1f:d0:38:9a:3b:4d:d4:9c:2e:66:fa:dc:a5:
                    69:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6B:2F:26:EA:5F:47:C2:B4:72:4C:D1:35:71:79:AC:C9:8F:23:EA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6a54d8a4-ff02-430a-ad5d-79095b0d2a67/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6a54d8a4-ff02-430a-ad5d-79095b0d2a67/f2046b7578bbaa098b083e843bd46c17390e6597.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.168.0/22
                  190.105.208.0/20
                  190.123.80.0/20
                IPv6:
                  2803:6d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52444

    Signature Algorithm: sha256WithRSAEncryption
         c3:da:c9:0d:fa:1e:22:02:57:88:32:71:8c:e7:93:0a:af:9f:
         08:ea:a8:48:52:ec:4a:55:3f:e0:95:b2:a4:4e:cd:3f:17:41:
         55:3c:37:64:31:36:89:42:81:dd:2a:49:18:10:f9:2b:01:6a:
         db:f8:49:c8:bb:34:e1:e2:b5:5e:94:ff:11:8a:23:64:9b:49:
         d1:61:dd:02:03:bb:2c:42:b8:3f:da:2a:5b:5c:b1:76:0c:9c:
         83:8e:89:e0:53:d8:5d:0f:a1:d9:ec:9b:0e:c7:a6:34:e8:17:
         e1:e7:4e:5a:62:67:79:9a:ee:5f:66:15:5d:3d:be:c7:37:86:
         31:91:d5:10:5a:c4:78:fd:a0:13:a8:c0:d9:42:35:9f:f8:bb:
         e0:e0:d7:58:00:1a:c1:5d:9b:b4:7d:f0:23:73:bd:99:f1:fa:
         2e:76:45:f0:86:96:c0:f9:df:b3:85:7e:36:33:c8:ca:1e:d6:
         02:79:d0:85:6e:3b:cf:ae:7f:af:ec:e7:c2:f1:73:4d:8e:01:
         22:07:e8:9c:d6:6a:82:79:55:88:8a:78:b0:0f:e9:94:ca:30:
         2c:07:62:fc:fa:b3:d3:79:f0:a3:ad:76:79:4f:35:cb:80:d2:
         21:a9:0a:8e:8b:fe:ac:ad:01:f1:cb:23:fe:d6:21:23:07:f7:
         9c:9d:9b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----